spring-boot-gdpr

GDPR-compliant logging in Spring Boot, part 3: the personal-data leaks outside your own code

Rigas PapazisisSoftware Engineering

show-sql writes to System.out, Hibernate’s bind logging prints every value in clear, an OpenTelemetry collector cannot erase what it receives, and a file appender quietly sets a one-year retention. The leaks no code review sees, and how to own the one switch you deliberately keep.